Valid download file? (Spybot S&D 1.2)

I downloaded the install file for Spybot S&D 1.2 from Tucows, using a mirror named Tierra. Out of an abundance of paranoia, I decided to download a second copy and do a file compare to verify that they were the same. As soon as I saw they were different sizes, I knew something strange was going on. A third download site also did not match the Tierra file, but did match the second file.

Any thoughts? How do you verify the integrity of mirrored downloads when the author's site doesn't provide any file size or checksum information?

Re: Valid download file? (Spybot S&D 1.2)

I downloaded the 3,577 KB Spybot S&D 1.2 version "spybotsd12.exe" from Patrick Kolle's site on 26 August 2003. That is the source site. HTH

Edited: There was mention on the site - sometime in 2003 - of someone having attempted to pirate the product. Patrick Kolle managed to get the ISP in question to pull the site. Whether the other product had the same filename, I do not know. (As a point of practice, if I annotate a download, I include it as a prefix in parentheses [e.g. (canon)s3A01enx.exe] - to maintain version control.)

Re: Valid download file? (Spybot S&D 1.2)

I could only find the mirrors to download from. But I get the same size that Rebel mentioned from 2 different mirrors...one of them being download.com, which I have used before (although I block their cookies).